What is the issue?

If you are experiencing issues where Excel or other office files containing legitimate macros are blocked as a virus, this article offers suggestions on settings that can be changed to allow these emails to be received by the client.

What is the solution?

  1. Log into SpamTitan.

  2. Go to Content Filtering > Viruses  > Clam Antivirus.

  3. Check if Treat OLE Macros as has Virus selected.

    If Virus is selected, you can change this to Nothing, Spam Score or Send to Sandbox.

    • Nothing: By default, OLE macros are not be blocked. They are, however, subject to all other tests in the system, including standard AV checks.

    • Spam Score: Adds a spam score of 2 to the email.

    • Send to Sandbox: Send the mail to the sandbox. See Sandboxing in SpamTitan Gateway.

Further Info

Block OLE Macros: This option causes ClamAV to detect all OLE macros in Microsoft Office files (.doc, .ppt, .xls) as a virus, and block them. This is useful if you want to allow these older document types, but don't want to risk allowing macros through that may contain viruses.

For more documentation, see Configuring Clam AV Settings.